From: Justin Smith <jsmith@mcs.drexel.edu>
To: selinux@tycho.nsa.gov
Subject: lsm-selinux-200111191100.tgz
Date: 27 Nov 2001 13:24:02 -0500 [thread overview]
Message-ID: <1006885442.1246.0.camel@vorpal> (raw)
In-Reply-To: <Pine.GSO.4.33.0111261601060.21971-100000@raven>
When I did make install in module, it did not complete successfully
because the makefile expected a directory to be named
/usr/src/selinux/module/selinux_plug/include/asm
and it was really
/usr/src/selinux/module/selinux_plug/include/asm-i386
When I moved asm-i386 to asm it worked and I was able to boot
selinux.
Having done so, I received the following messages:
avc: denied { mounton } for pid=75 exe=/bin/mount path=/bus/usb
dev=00:03 ino=4459
scontext=system_u:system_r:mount_t
tcontext=system_u:object_r:proc_t
tclass=dir
task_precondition: assigning context system_u:system_r:init_t to pid 2
exe=none
usb-uhci.c: v1.268:USB Universal Host Controller Interface driver
avc: denied { search } for pid=93 exe=/bin/cat dev=00:08 ino=1
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:unlabeled_t
tclass=dir
avc: denied { read } for pid=93 exe=/bin/cat path=/devices dev=00:08
ino=2
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:unlabeled_t
tclass=file
avc: denied { getattr } for pid=93 exe=/bin/cat path=/devices
dev=00:08 ino=2
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:unlabeled_t
tclass=file
avc: denied { write } for pid=10 exe=/bin/bash path=/etc/mtab
dev=03:01 ino=28440
scontext=system_u:system_r:initrc_t
tcontext=system_u:object_r:file_t
tclass=file
(many times)
.................
avc: denied { create } for pid=296 exe=/sbin/ipchains
scontext=system_u:system_r:initrc_t
tcontext=system_u:system_r:initrc_t
tclass=rawip_socket
avc: denied { setopt } for pid=296 exe=/sbin/ipchains lport=255
scontext=system_u:system_r:initrc_t
tcontext=system_u:system_r:initrc_t
tclass=rawip_socket
avc: denied { unlink } for pid=752 exe=/bin/umount path=/etc/mtab
dev=03:01 ino=28440
scontext=system_u:system_r:mount_t
tcontext=system_u:object_r:file_t
tclass=file
avc: denied { search } for pid=838 exe=/usr/sbin/httpd
path=/www/tomcat dev=03:05 ino=336750
scontext=system_u:system_r:httpd_t
tcontext=system_u:object_r:httpd_user_script_rw_t
tclass=dir
(plus many messages connected with running the Gnome desktop)
--
--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2001-11-27 18:29 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <Pine.GSO.4.33.0111261601060.21971-100000@raven>
2001-11-26 22:37 ` Errors in building lsm-selinux-200111191100.tgz Justin Smith
2001-11-27 12:39 ` Stephen Smalley
2001-11-27 18:24 ` Justin Smith [this message]
2001-11-27 19:05 ` lsm-selinux-200111191100.tgz Stephen Smalley
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1006885442.1246.0.camel@vorpal \
--to=jsmith@mcs.drexel.edu \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.